[22070] in Kerberos
Re: tickets not showing up
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Jul 27 10:41:11 2004
Message-ID: <4106680A.A420D621@anl.gov>
Date: Tue, 27 Jul 2004 09:34:50 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: David Tsai <dwtsai@mit.edu>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
David Tsai wrote:
> Hi, I'm new to Kerberos from the admin/developer end of things and am working on a Java 1.4.2 GSS-API project where I'm trying to kerberize a few classes. I set up a KDC on a Linux 9 server and have a Windows XP client machine connecting to it. I ran the JAAS Authenticaction tutorial at http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/tutorials/AcnOnly.html and it said "authentification succeeded". However, when I do a "klist" on the KDC server or on the Windows XP machine, I don't see any tickets issued. I system.out'ed the mysubject.getPrivateCredentials() and it prints out all the info for a ticket that I supposedly got, but I am baffled at why klist doesn't show it.
>
> Any insight on this would be greatly apprecitaed.
The tickets may be in a seperate cache, or only in memory accessable via java. See the
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html
where it talks about the ticketCache, and useTicketCache
If you use the non-java klist, you may have to point at this, or set the KRB5CCNAME to point at it.
.
>
>
> --David
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
